[Unit]
Description=RSMon distributed monitoring worker
Documentation=https://rocketgit.ru/rsmon/worker
After=network-online.target
Wants=network-online.target

[Service]
Type=simple
User=rsmon-worker
Group=rsmon-worker
Environment=HOME=/var/lib/rsmon-worker
Environment=RSMON_WEBAPP_DATA_DIR=/var/lib/rsmon-worker/webapp
EnvironmentFile=/etc/rsmon-worker/worker.env
WorkingDirectory=/var/lib/rsmon-worker
ExecStart=/usr/local/bin/rsmon-worker
Restart=always
RestartSec=5s
TimeoutStopSec=20s
AmbientCapabilities=CAP_NET_RAW
CapabilityBoundingSet=CAP_NET_RAW
NoNewPrivileges=true
PrivateTmp=true
ProtectHome=true
ProtectSystem=full
ReadWritePaths=/var/lib/rsmon-worker

[Install]
WantedBy=multi-user.target